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Description 

[0001] The present invention relates to a seif -serv- 
ice business system. 

[0002] Fraudulent use of self-service business sys- 5 
terns such as automated teller machine (ATM) systems 
has become a substantial problem for banks and other 
financial institutions. Customer compiaints have been 
received that "phantom withdrawals*' have been made 
from their accounts by persons passing themselves off to 
as the customers. 

[0003] In an attempt to reduce the likelihood of 
fraud occurring, it is known to use biometrics for confir- 
mation of user identity in a self-service system. Biomet- 
rics relates to the analysis of biological observations is 
and phenomena. More particularly, in the present con- 
text, it relates to the measurement and evaluation of 
certain physical characteristics which vary from person 
to person. Biometric identification systems have been 
developed and are in use today The publication "Elec- so 
tronic Banking 1", published by TOST-NEWS*\ Stoke- 
sub-Hamdon, Somerset TA14 6BR England, discusses 
the use of biometrics in connection with electronic bank- 
ing and identifies five types of biometric identification: 
signature verification, hand geometry, finger and palm 2S 
print comparison, voiceprint measurement and retinal 
or iris eye scanning. A sixth type, vein patterns, is iden- 
tified as having recently been designed. When a bio- 
metric assessment is made, a value is calculated for 
each user. This value is corrpared with a predefined ref- sc 
erence value to decide whether to accept or reject a 
user. The use of biometrics to confirm the identity of a 
user is not always completely accurate. Because of the 
limitations of the technique, tiiere is always a false 
acceptance rate and a false reject rate. Even though 3S 
these rates usually lie within the range of 0.1% and 3%, 
depending upon the biometric used, this can still be 
unacceptable for banks. 

[0004] GB-A-2,237.670 discloses a system for the 
transfer of value for use in a situation where a user 40 
wishes to receive the services or goods from a supplier 
in return for an appropriate transfer of funds or a com- 
mitment to recognize the vatue of the services/goods 
supplied. This system comprises a user interface unit 
having user identification input means, biometric means 46 
for producing biometric output data relating to a user, 
storage means for storing biometric reference data 
relating to an authorised of the system and is also 
arranged such that data relating to previous transac- 
tions initiated by the authorised user can be stored so so 
that the likely type of transaction to be requested by a 
given user can be protected having regard to the past 
request history of that user. 

[0005] Accordingly it is an object of the present 
invention to preside a self-service system having an 55 
improved capability of detecting attempted fraud. 
[0006] According to the invention there is provided 
a self-service system including a user interface unit hav- 



ing user identification means, input means operable by 
a user for initiating a selected self-service transaction, 
biometric means for producing biometric output data 
relating to a user, storage means for storing biometric 
reference data relating to a plurality of authorised users 
of the system and arranged to store data relating to pre- 
vious transactions initiated by said authorised users, 
prediction means coupled to said identification means 
and arranged to predict the type of transaction to be 
requested by a given user on the basis of the stored 
data relating to previous transactions, transaction 
authorisation means coupled to said biometric means 
and to said prediction means and arranged to make a 
determination as to whether a transaction initiated by a 
user is to be permitted to proceed to completion, char- 
acterized in that said determination is made on the 
basis that if said biometric outout data does not conclu- 
sively match said biometric reference data but matches 
said reference data within a predetermined limit of dis- 
crepancy the comparison between the predicted and 
requested transaction is used in determining whether 
the transaction is permitted to proceed to completion, 
and by the system including further storage means 
arranged to store a suspicion count for each of said 
authorised users, each suspicion count being arranged 
to be incremented by one each time said biometric out- 
put data for the relevant user is not a conclusive match 
with said biometric reference data for that user and 
regardless of the result of the comparison between the 
predicted and requested transaction, and said transac- 
tion authorisation mens being arranged to terminate a 
transaction if said suspicion count reaches a predeter- 
mined threshold value. 

[0007] It should be understood that, in a self-serv- 
ice system in accordance with the present invention, if a 
biometric test is not conclusive, use of the prediction 
means can be helpful in resolving the identity of the 
user. The prediction means involves the t^e of a predic- 
tion to determine whether or not a proposed transaction 
is consistent with the user's normal behaviour in decid- 
ing whether to permit the transaction to proceed. A 
record of past transactions for each user is maintained 
and stored in a memory in the system. When a user 
commences a transaction, the system can predict what 
type of transaction the user is likely to request In the 
case in which the biometric evaluation is questionable, 
the added information with respect to whether the type 
of transaction selected by the user is consistent with 
past actions can tip the scales for or against user 
acceptance. 

[0008] Another factor which can be employed in 
determining whether a requested transaction may pro- 
ceed to completion is a suspicion count. If a predeter- 
mined number of consecutive suspicious transactions 
involving a particular user have taken place, this can be 
determinative of user rejection in close cases. A suspi- 
cion count for each user is maintained in memory and is 
incremented for each suspicious transaction. The count 
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is decremented to a start value (e.g. zero) whenever a 
non -suspicious transaction involving tiiat user takes 
place. 

[0009] One embodiment of the invention will now be 
described by way of example with reference to the s 
accompanying drawings, in which :- 

Fig. 1 is a block diagram of a self-service system in 
accordance with the invention incorporating a plu- 
rality of ATMs; 10 
Fig. 2 is a schematic diagram of one of the ATMs of 
Fig. 1; and 

Fig. 3 is a flow diagram illustrating the operation of 
the transaction authorisation means of the system. 

15 

[0010] Referring to Figs. 1 and 2, the self-service 
business system shown Sierern includes a plurality of 
ATMs 10 connected in conventional manner to a host 
computer 12. As shown in Fig. 2, each ATM 10 includes 
a conventional user interface unit or fascia 14 incorpo- 20 
rating key operated input means 16 for enabling a user 
of the ATM 1 0 to enter, if required, a personal identifica- 
tion number (PIN) and to select desired services pro- 
vided by the ATM 10, a lead-through display screen 18 
for indicating to the user the options available to htm in 2s 
carrying out a transaction on the ATM 10 and for indicat- 
ing the keys of the input means 16 which require to be 
operated in order to select a desired service or services, 
and a card reader 20 for reading account information 
contained on an identification card which the user 30 
inserts in operation into a slot (not shown) forming part 
of the card reader 20 whereby the user can be identi- 
fied. Other conventional modules included in each ATM 
10 include a cash dispenser 22 for counting and pre- 
senting currency notes to a user, a receipt printer 24 for 35 
printing receipts to be presented to a user when a 
deposit or cash withdrawal is made using the ATM 10 
and for printing a mini-statement or balance of account 
statement when requested by a user, a journal printer 
26 for printing a record of transactions carried out by the 40 
ATM 10, a depository 28 for receiving envelopes con- 
taining cash and/or cheques deposited by a user, envi- 
ronmental data source means 30 for providing data as 
to the time arxl date of a transaction together with the 
location of the ATM 10, processing means 32 for con- 45 
trolling the operations of the various elements of the 
ATM 10, and a communications module 34 for coupling 
the ATM 10 to the host computer 12. 
[001 1 ] The host computer 1 2 includes a user refer- 
ence file 36 which includes records of the types of trans- so 
actions performed by authorised users in previous uses 
of the system which includes the various ATMs 10, envi- 
ronmental data relating to these transactions, and bio- 
metric reference data for each authorised user. 
[0012] Also included in each ATM 10 is a predictive ss 
system 38 which is arranged to use the information con- 
tained in the user reference file 36 for a particular user 
to ascertain what service or services have been 



requested most frequently by friat user at particular 
times, dates and locations in the past, and therefore 
what service or services are most likely to be requested 
by that user when he next initiates a transaction by 
inserting his identification card into the card reader 20 of 
one of the ATMs 10. The processing means 32 of each 
ATM 1 0 acts in dependence on the output of the predic- 
tive system 38 to cause the ATM 10 to perform certain 
operations at certain times and in certain sequences in 
order to cause the ATM 10 to complete a transaction 
with greater overall speed, and to simplify the decisions 
and selections which need to be made by the user, if the 
service or services actually requested is or are the 
same as the service, or at least some of the services, 
which have been predicted. Thus, the processing 
means 32 causes a particular menu to be displayed on 
the iead-through display screen 1 8 following initiation of 
a transaction by a user and following a prediction that 
particular services are likely to be requested by the 
user. For example, a simplified menu could be displayed 
consisting of only four questions, such as: "Do you 
. require £20?", "Do you require £30?", "Do you require a 
mini-statement?", and "Do you require some other 
transaction?". Also, immediately following the initiation 
of a transaction, the ATM 10 could obtain system 
authorization for, and count out ready for presenting to 
the owner, a predicted amount of cash in advance of an 
anticipated withdrawal request If, for example, a with- 
drawal request is predicted to be either £20 or £30. then 
£20 will be counted out since, if £30 is actually 
requested, a further $10 can readily be counted and 
added to the already counted amount. 
[0013] Also included in the user interface unit 14 of 
each ATM 10 is a biometric means 40 which receives 
one or more biometric inputs from a user who is 
addressing the ATM 10. As has previously been set 
forth, the biometric information required may include 
one or niore of several types, such as, for example, sig- 
nature verification, hand geometry, finger and palm print 
comparison, voiceprint measurement, retinal or iris eye 
scanning or vein pattern determination. The particular 
input apparatus will vary in accordance with the particu- 
lar biometric employed. For example, for voiceprint 
measurement, a microphone would customarily be 
used; for signature verification, a pressure-sensitive 
writing platform might be employed; for hand geometry 
a platform on which the customer's hand is placed and 
sensed could be used. etc. Output data from the bio- 
metric means 40 is compared with the biometric refer- 
ence data on file in the user reference file 36. As a result 
of this comparison, a first value is derived representa- 
tive of the difference between the output data and the 
reference data. The output data is considered to be a 
conclusive match with the reference data if the first 
value is less than a predetermined threshold value. 
[0014] Included in storage in a memory unit 42 of 
the host computer 12 is a suspicion count. This is a 
count of the number of consecutive suspicious transac- 
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tions performed by a user. A suspicious Iransaclion is 
one in which output data from the biometric means 40 
fails to match conclusively the reference biometric data 
for the relevant user but lies within a predetermined limit 
of discrepancy. Each time that a suspicious transaction 5 
takes place, the total of the suspicion count is incre- 
mented by one. On the other hand, when a non-suspi- 
cious transaction is completed by a user, the suspicion 
count is decremented to zero. A suspicion count thresh- 
old number, either for a particular user or for al! users, w 
may be determined and stored in the host computer 12, 
for example in the user reference file 36. 
[0015] Also included in each ATM 10 is a transac- 
tion authorisation module 44, which is a software mod- 
ule that is integrated into the processing means 32 15 
which controls the operation of the ATM 10, the module 
44 serving to authorise a transaction selected by a user. 
The inputs to the transaction authorisation module 44 
are as follows: the predicted transaction; the actual 
requested transaction; the biometric value for the user; 20 
the biometric reference value; arxi any previously 
recorded suspicion count. The outputs from the transac- 
tion authorisation module 44 are: OK, meaning that the 
identity of the aser has been confirmed and that the 
user can proceed with the transaction; failed, meaning 25 
that the biometric test has not confirmed the identity of 
the user as read from his identification card, thereby 
implying that an attempted fraud is taking place; and 
suspicious, meaning that the module 44 cannot be 
1 00% sure either way. In the last instance, the suspicion so 
count in the memory unit 42 is incremented by one. so 
that the system is aware of a possible attempted fraud. 
It should be understood that if the suspicion count 
reaches a predetermined threshold value (typically 3) 
then the module 44 terminates the transaction. 35 
[0016] The operation of the self-sen/tce system, 
particularly as regards the transaction authorisation 
process, will now be described with reference to Fig. 3. 
A transaction is initiated (block 50) by a user inserting 
his identification card into the card reader 20 of one of 40 
the ATMs 10. After a transaction is initiated, a biometric 
check of the user is made (block 52), and simultane- 
ously a prediction is made (block 54) as to the service or 
services that will probably be requested by the user. At 
the same time, a suspicion count, if there is one for that 45 
user, is forwarded by a path 56 to the transaction 
authorisation module 44. The user then makes an 
actual transaction selection (block 58). Ail of the infor- 
mation from these actions is input to the module 44, as 
represented by a biometric reference path 60, a biomet- so 
ric value path 62, the suspicion count path 56, a pre- 
dicted transaction path 64 and an actual transaction 
path 66. The module 44 then processes all of this infor- 
mation and provides a decision. The various alterna- 
tives are represented in Fig. 3 by , paths 68, 70 and 72, S5 
shown as outputs from the module 44, which lead to 
blocks 74, 76 and 78, respectively. 
[0017] it should be understood that if the biometric 



value is a conclusive match with the reference value 
then the transaction continues (block 76) regardless of 
whether the actual transaction is as predicted. 
[0018] Also, if the biometric value clearly fails, tiien 
the transaction is found not to be valid by the module 44 
regardless of whether the actual transaction is as pre- 
dicted. In this case the transaction is terminated (block 
78) and the suspicion count is incremented. Another 
option in the case of an invalid transaction is to arrange 
for the relevant ATM 10 to capture the user's identifica- 
tion card. 

[001 9] If the biometric value is close to the biometric 
reference value (i.e. is not a conclusive match but 
matches the reference value within a predetermined 
limit of discrepancy) and the actual transaction is as 
predicted, then the module 44 increments the suspicion 
count and permits the transaction to proceed to comple- 
tion provided that the suspicion count has not reached 
the threshold value, if the biometric value is close to the 
reference value but the actual transaction is not as pre- 
dicted, the suspicion count is incremented and appro- 
priate further action is taken (block 74) to handle a 
suspicious transaction, again provided that the suspi- 
cion count has not reached the threshold value. This 
further action may involve repeating the biometric 
check, making a different biometric check or requiring 
the user to enter his PIN on the ATM input means 16, If 
the further biometric check is conclusive or the entered 
PIN is correct then the transaction is allowed to pro- 
ceed. On the other hand, if the further biometric check 
is not conclusive or the PIN is incorrect then the trans- 
action is terminated. 

[0020] In an alternative embodiment of a seif-serv- 
ice system in accordance with the invention, instead of 
storing a user reference file in the host computer 12, a 
data base containing a record of a user's previous trans- 
actions and biometric reference data could be stored in 
the identification card for that user, this data being read 
out at the same time as the identification data for the 
user. Also, the suspicion count for the user could be 
stored in the identification card. 

Claims 

1 . A self-service system including a user interface unit 
(14) having user identification means (20), input 
means (16) operable by a user for initiating a 
selected self-service transaction, biometric means 
(40) for producing biometric output data relating to 
a user, storage means (36) for storing biometric ref- 
erence data relating to a piurality of authorised 
users of the system and arranged to store data 
relating to previous transactions initiated by said 
authorised users, prediction means (38) coupled to 
said identification means (20) and arranged to pre- 
dict the type of transaction to be requested by a 
given user on the basis of the stored data relating to 
previous transactions, transaction authorisation 
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means (44) coupled to said biometric means (40) 
and to said prediction means (38) and arranged to 
make a determination as to whether a transaction 
initiated by a user is to be permitted to proceed to 
completion, characterized in that said determina- s 
tion is made on the basis that if said biometric out- 
put data does not conclusively match said biometric 
reference data but matches said reference data 
within a predetermined limit of discrepancy the 
comparison between the predicted and requested io 
transaction is used in determining whether the 
transaction is permitted to proceed to completion, 
and by the system including further storage means 
(42) arranged to store a suspicion count for each of 
said authorised users, each suspicion count being is 
arranged to be incremented by one each time said 
biometric output data for the relevant user is not a 
conclusive match with said biometric reference 
data for that user and regardless of the result of the 
comparison between the predicted and requested 20 
transaction, and said transaction authorisation 
mens (44) being arranged to terminate a transac- 
tion if said suspicion count reaches a predeter- 
mined threshold value. 

25 

2. A system according to Claim 1, characterized in 
that said transaction authorisation means (44) is 
arranged to allow a transaction to proceed if said 
biometric output data conclusively matches said 
biometric reference data, regardless of the compar- 30 
ison between the predicted and requested transac- 
tion. 

3. A system according to Claim 2, characterized in 
that a first value is derived representative of the dif- 55 
ference between said biometric output data and 
said biometric reference data, said output data 
being considered to be a conclusive match with 
said reference data if said first value is less than a 
predetermined threshold value. 4o 

4. A system according to either Claim 2 or Claim 3, 
characterized in that, if said biometric output data 
does not conclusively match said biometric refer- 
ence data but does match said reference data 45 
within said predetermined limit, and said requested 
transaction is not consistent with said predicted 
transaction, said transaction authorisation means 
(44) is arranged to cause said system to obtain 
additional information concerning the relevant user so 
before a final determination is made as to whether 
the transaction is permitted to proceed to comple- 
tion, 

5. A system according to Claim 4, characterized in 55 
that in the course of a transaction a further use is 
made of said biometric means (40) to provide said 
additional information. 



6. A system according to Claim 4, characterized in 
that in the course of a transaction the user enters a 
personal identification number by means of said 
input means (1 6) to provide said additional informa- 
tion. 

7. A system according to any one of the preceding 
claims, characterized in that said user identification 
means (20) is formed by a card reader for reading 
from a card account information relating to a user. 

8. A system according to any one of the preceding 
claims, characterized in that the stored data relating 
to previous transactions is updated each time a 
transaction is initiated by one of said authorised 
users. 

9. A system according to any one of the preceding 
claims, characterized by a host computer (12) and a 
plurality of automated teller machines (10) each 
including a user interface unit (14), prediction, 
means (38) and authorisation means (44) as spec- 
ified in Claim 1. 

Patentanspruche 

1. Ein Selbstbedienungssystem mit einer Benutzer- 
Interface-Einheit (14), mit einer Benutzer-ldentifi- 
zierungs-Einrichtung (20), einer Eingabeeinheit 
(16), die von einem Benutzer zur Einleitung einer 
ausgewahlten Selbstbedienungstransaktion betS- 
tigbar ist. einer biometrischen Einrichtung (40) zur 
Erzeugung von benutzerbezogenen biometrischen 
Ausgangsdaten, einer Speichereinrichtung (35) zur 
Speicherung biometrischer Referenzdaten bezug- 
lich einer Mehrzahi autorisierter Benutzer des 
Systems und Speicherung von Daten bezugltch frD- 
herer Transaktlonen, welche von den autorisierten 
Benutzern eingeleitet wurden, einer mit der Identifi- 
zierungseinrichtung (20) gekoppelten Vorhersage- 
Einrichtung (38) zur Vorhersage der von einem 
bestimmten Benutzer angefa-derten Transaktions- 
art auf Grundlags gespeicherter Daten uber 
zuruckliegende Transaktionen, einer mit der biome- 
trischen Einrichtung (40) und der Vorhersage-Ein- 
richtung (38) gekoppelten Transaktions- 
Autorisierungseinriditung (44), welche eine Ent- 
scheidung darOber trifft. ob eine von einem Benut- 
zer eingeieitete Transaktion zu Ende gefuhrt 
werden dart, dadurch gekennzeichnet. da3 diese 
Bestimmung auf der Grundlage erfolgt, daB im 
Falle einer nichtschlussigen Ubereinstimmung der 
biometrischen Ausgangsdaten mit den biometri- 
schen Referenzdaten, jedoch eine Ubereinstim- 
mung mit den Referenzdaten innerhalb einer 
vorbestimmten Diskrepanzgrenze der Vergleich 
zwischen der vorhergesagten und der angeforder- 
ten Transaktion benutzt wird, um zu bestimmen, ob 
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die Transaktion fertig durchgefuhrt werden darf, 
und daB das System weiterhin eine Speicheranord- 
nung (42) enthait, um fur jeden der autorisierten 
Benutzer einen VerdachtszShiwert zu speichern, 
welcher jedesmal um 1 erhdht wird, wenn die bio- 5 
metrischen Ausgangsdaten des betreffenden 
Benutzers nicht schlussig mit den biometrischen 
Referenzdaten fur diesen Benutzer ubereinstim- 
men, und zwar unabhSngig vom Ergebnis des Ver- 
gieichs zwischen der vorhergesagten und der 70 
angeforderten Transaktion, und daB die Transakt- 
ions-Autorisierungseinrichtung (4-4) die Transaktion 
abbricht, wenn der VerdachtszShlwert einen vorbe- 
stimmten Schweliwert ubersteigt. 

15 

2. System nach Anspruch 1, dadurch gekenn- 
zeichnet dai3 die Transaktions-Autorisierungsein- 
richtung (44) unabliSngig vom Vergieich zwischen 
vorhergesagter und angeforderter Transaktion eine 
Fortsetzung der Transaktion eriaubt, wenn die bio- 20 
metrischen Ausgangsdaten schlussig mit den bio- 
metrischen Referenzdaten ubereinstimmen, 

3. System nach Anspruch 2, dadurch gekenn- 
zeichnet, da3 ein erster Wert abgeleitet wird, der 25 
die Differenz zwischen den biometrischen Aus- 
gangsdaten und den biometrischen Referenzdaten 
darstelit und da3 die Ausgangsdaten als schiOssig 
ubereinstimmend mit den Referenzdaten angese- 
hen werden, wenn der erste Wert kleiner a!s ein 30 
vorbestimmter Schweliwert ist. 

4. System nach Anspruch 2 oder 3, dadurch gekenn- 
zeichnet, da3 dann, wenn die biometrischen Aus- 
gangsdaten nicht schlussig mit den biometrischen 3S 
Referenzdaten ubereinstimmen, jedoch eine Uber- 
einstimmung mit den Referenzdaten innerhalb 
einer vorbestimmten Grenze vodiegt, und wenn die 
angeforderte Transaktion nicht konsistent mit der 
vorhergesagten Transaktion ist, die Transaktions- 40 
Autorisierungseinrichtung (44) derart ausgebiidet 

ist, daf3 sie dem System eine zusatziiche Informa- 
tion beziiglich des betreffenden Benutzers zukom- 
men laBt, ehe eine endgOttige Entscheidung 
daruber getroffen wird, ob die Fortsetzung der 45 
Transaktion eriaubt wird. 

5. System nach Anspruch 4, dadurch gekenn- 
zeichnet, daf3 im Verlauf einer Transaktion die bio- 
metrische Einrichtung (40) zur Lieferung 50 
zusatzlicher Information dient. 

6. System nach Anspruch 4, dadurch gekenn- 
zeichnet daf3 im Verlauf einer Transkation der 
Benutzer uber die Eingabeeinrichtung (16) eine ss 
persGnliche Identifikationsnummer zur Lieferung 
der zusStziichen Information eingibt. 



7. System nach etnem der vorstehenden Anspruche, 
dadurch gekennzelchnet, dal3 die Benutzer- Iden- 
tlfizierungseinrichtung (20) durch einen Kartenieser 
gebildet wird, der von einer Karte eine benutzerbe- 
zogene Kontoinformation abliest. 

8. System nacti einem der vorstehenden AnsprOche. 
dadurch gekennzelchnet, da (3 die gespeicherten 
Daten bezCiglich zuruckliegender Transaktionen 
jedesmal aktuaiisiert werden, wenn eine Transak- 
tion von einem der autorisierten Benutzer eingelei- 
tetwird. 

9. System nach einem der vorstehenden Anspruche, 
gekennzelchnet durch einen Host-Computer (1 2) 
und eine Mehrzahl von Bankautomaten (10), deren 
jeder eine Benutzer-lnterface-Einheit (14), eine 
Vorhersage-EinricHtung (38) und eine Autorisie- 
rungseinrichtung (44) gemafj Anspruch 1 enthait. 

Revandications 

1. Un systems libre-service comportant une unit§ 
interface utiiisateur (14) ayant un moyen d'identifi- 
cation utiiisateur (20), un moyen d' entree (16) ope- 
rable par un utiiisateur pour d^clencher une 
transaction libre-service selectionnee, un moyen 
biom^trique (40) pour produire des donn^es de 
sortie biom^triques relatives ^ un utiiisateur, un 
moyen de memorisation (36) pour m^moriser des 
donn^es de r6f6rence biom6triques relatives k une 
plurality d'uttlisateurs autoris^s du syst^me et 
arrange pour m^moriser des donn6es relatives k 
des transactions ant^rieures d6clench6es par les- 
dits utilisateurs autoris^s. un moyen de prediction 
(38) accoupl6 audit moyen d 'identification (20) et 
arrange pour pr^ire le type de transaction suscep- 
tible d'etre demand^ par un utiiisateur donn6 sur ies 
bases des donn6es m6moris6es relatives k des 
transactions ant6rieures, un moyen d'autprisation 
des transactions (44) accoupi6 audit moyen biom^- 
trique (40) et audit moyen de prediction (38) et 
arrange pour determiner si !'on doit permettre a une 
transaction declench^e par un utiiisateur d'etre 
men^e k bien, caract6rise en ce que ladite determi- 
nation est faite en partant du principe que si iesdi- 
tes donn6es de sortie biom^riques ne 
correspondent pas de fagon concluante auxdites 
donn6es de reference biometriques mats corres- 
pondent auxdites donn^es de reference dans une 
limite d'^cart predetermin6e, la comparaison entre 
la transaction pr6dite et la transaction demand^e 
est utilisee pour determiner si Ton permet k la tran- 
saction d'etre menee k bien, et par ie systeme com- 
portant un autre moyen de memorisation (42) 
arrange pour memoriser un compte des transac- 
tions suspectes pour chacun desdits utilisateurs 
autorises, chaque compte des transactions suspec- 
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tes 6tant arrange pour §tre incr6ment§ d'un k cha- 
que fois que lesdites donn6es de sortie 
biom^triques pour !*utilisateur appropri^ ne sont 
pas une correspondance conciuante avec iesdites 
donn^es de r6f 6rence biomitriques pour cet utiiisa- 5 
teur et quel que soit le r^suftat de la comparaison 
entre la transaction predite et ia transaction deman- 
dee, et ledit moyen d'autorisation des transactions 
(44) 6tant arrange pour mettre fin k une transaction 
si ledit compte des transactions suspectes atteint w 
une valeur de seuil pr6d6ternnin6e 

2. Un syst^me conform^ment k la revendrcation 1, 
caract6ris6 en ce que ledit moyen d'autorisation 
des transactions (44) est arrange pour permettre k is 
une transaction de se poursuivre si lesdites don- 
n6es de sortie biometriques correpondent de fa^on 
conciuante avec lesdites donn^es de r6f§rence bio- 
m6triques, quelle que soit la comparaison entre la 
transaction predite et la transaction demand^e. 20 

3. Un systfeme conform6ment k la re\/endication 2, 
caract^ris^ en ce qu'une premiere valeur est d6ri- 
v6e. representative de la difference entre lesdites 
donn^es de sortie biometriques et lesdites don- 25 
n^es de reference biometriques, lesdites donn^es 

de sortie etant consider^es etre une correspon- 
dance conciuante avec lesdites donn^es de refe- 
rence si ladite premiere valeur est inferieure k une 
valeur de seuil predeterminee. 30 

4. Un systeme contormement k la revendicatlon 2 ou 
k ia revendicatlon 3, caracterrse ence que, si lesdi- 
tes donnees de sorties biometriques ne correspon- 
dent pas de fa9on conciuante avec lesdites as 
donnees de reference biometriques mais corres- 
pondent avec lesdites donnees de reference dans 
ladite limite predeterminee, et que ladite transac- 
tion demandee n'est pas en accord avec iadite tran- 
saction predite, ledit moyen d'autorisation des 4q 
transactions (44) est arrange pour faire en sorte 
que ledit systeme obtienne des informations sup- 
piementaires concernant I'utiiisateur approprie 
avant qu'il ne soit determine deflnitivement si Ton 
permet k la transaction d'§tre menee k bien. 45 

5. Un systeme conformement k la revendicatlon 4, 
caract6rise en ce que, au cours d'une transaction, 
une autre utilisation est farte dudit moyen biometri- 
que (40) pour fournir lesdites informations supple- so 
mentaires. 

0. Un systeme conformement k la revendicatlon 4, 
caracterise en ce que, au cours d'une transaction, 
Tutilisateur entre un code personnel au moyen dudit 55 
moyen d'entree (16) pour fournir lesdites informa- 
tions suppiementaires. 



7. Un systeme conformement k Tune quelconque des 
revendications precedentes, caracterise en ce que 
ledit moyen d'identif ication utilisateur (20) est forme 
par un lecteur de canes pour lire, k partir d'une 
carte, des informations relatives au compte d'un uti- 
lisateur. 

8. Un systeme conformement k Tune quelconque des 
revendications precedentes, caracterise en ce que 
les donnees m6moris6es relatives k des transac- 
tions anterieures sont mises k jour k chaque fois 
qu'une transaction est dedenchee par I'un desdits 
utilisateurs autorises. 

9. Un systeme conformement k i'une quelconque des 
revendications precedentes, caracterise par un 
prdinateur central (12) et une piuralite de guichets 
automatiques bancaires (10), chacun comportant 
une unite interface utilisateur (14), un moyen de 
prediction (38) et un moyen d'autorisation (44) 
comme specifie dans la revendicatlon 1 . 
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